Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-53342
HistoryJul 16, 2021 - 12:00 a.m.

PostgreSQL Command Injection Vulnerability

2021-07-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.0004 Low

EPSS

Percentile

5.2%

PostgreSQL is a free object-relational database management system from the Postgresql organization. The system supports most SQL standards and provides many other features such as foreign keys, triggers, views, etc. A security vulnerability exists in PostgreSQL, which stems from the fact that a privileged attacker could exploit the vulnerability to create a database name that would allow execution of shell commands as a PostgreSQL user when calling pglogical. No detailed vulnerability details are currently available.

0.0004 Low

EPSS

Percentile

5.2%